Sorry for this late response. Problem continues. When I try to start agent using ossec-control command, same error is returned:
Starting OSSEC HIDS v3.3.0... OSSEC analysisd: Testing rules failed. Configuration error. Exiting. On the other side, removing entries about port and protocol in agent ossec.conf's file like Gordon said, it doesn't work also. More ideas? Regards, C. L. Martinez On 29/05/2019 13:14, dan (ddp) wrote: > On Sat, May 25, 2019 at 1:53 PM Carlos Lopez <[email protected]> wrote: >> >> >> >> >> >> On 25/05/2019 18:52, Carlos Lopez wrote: >>> Hi all, >>> >>> I have installed Ossec 3.3.0 from source in a FreeBSD 12 host to work >>> as an agent, but when I try to start ossec daemons via ossec-control >>> script returns this error: >>> >>> Starting OSSEC HIDS v3.3.0... >>> OSSEC analysisd: Testing rules failed. Configuration error. Exiting. >>> > > This error should only happen on Server and Local installations. > >>> My ossec.conf in this agent is pretty simple: >>> >>> <ossec_config> >>> <client> >>> <server> >>> <address>172.22.59.11</address> >>> <port>2312</port> >>> <protocol>udp</protocol> >>> </server> >>> </client> >>> </ossec_config> >>> >>> Any tips? >>> >> >> My install options was: >> >> cd ossec-hids-*/src >> gmake TARGET=agent PCRE2_SYSTEM=yes ZLIB_SYSTEM=yes USE_INOTIFY=yes >> gmake install-agent >> >> -- >> >> --- >> You received this message because you are subscribed to the Google Groups >> "ossec-list" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/ossec-list/VI1PR10MB22536682B88E2CFA0A9B2994DB030%40VI1PR10MB2253.EURPRD10.PROD.OUTLOOK.COM. >> For more options, visit https://groups.google.com/d/optout. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ossec-list/VI1PR10MB2253E0D4F831BB6CA5BB13CEDB1A0%40VI1PR10MB2253.EURPRD10.PROD.OUTLOOK.COM. For more options, visit https://groups.google.com/d/optout.
